Third Party data breach in the news: PG&E

In this case a contractor to the utility, Pacific Gas & Electric, mishandled confidential data and exposed it to the internet for a period of time. PG&E only found out about the breach through an external security researcher, not through their own assessment and monitoring.